Sunday, April 25, 2021
















A Cyber Workforce Research and Development Platform
CERT PCTC (Private Cyber Training Cloud) contains a library of instruction and reference information about cyber security, information assurance, incident response, computer forensics, and other vital information security topics.
https://pctc.cyberforce.site/lms


IETF officially deprecates TLS 1.0 and TLS 1.1
The driving force behind the deprecation process was the large number of attacks that were revealed in previous years and which impacted the cryptographic algorithms at the base of the two protocols.
This included attacks like BEAST, POODLE, ROBOT, SWEET 32, LUCKY 13, and others, all of which showed how attackers could take advantage of weaknesses in both SSL and TLS 1.0/1.1 to compromise encrypted communications and attack organizations.
IETF officially deprecates TLS 1.0 and TLS 1.1



Microsoft Package Manager
Microsoft has a Package Manager. It is like Linux Package Managers or Chocolaty in that it has a repository of current applications. It can also be set up to have your own repository of applications specific to your environment. So you can use Powershell to install a group of applications that you use for your own business use cases.
https://docs.microsoft.com/en-us/powershell/module/packagemanagement/?view=powershell-7.1

InfoSec Update

 INTRODUCTION TO ARM ASSEMBLY BASICS

The following topics will be covered step by step:

ARM Assembly Basics Tutorial Series:
Part 1: Introduction to ARM Assembly
Part 2: Data Types Registers
Part 3: ARM Instruction Set
Part 4: Memory Instructions: Loading and Storing Data
Part 5: Load and Store Multiple
Part 6: Conditional Execution and Branching
Part 7: Stack and Functions


MITRE Publications
We encourage our staff to share their knowledge with the public through a number of avenues, including publishing papers and speaking at conferences and symposia. You can find technical reports, white papers, and other related publications on a wide variety of topics on this site.


Database of Free / Open Access Online Computer Science Books, Textbooks, and Lecture Notes
(1243 books and growing)



Malware Unicors's reverse engineering workshops
Reverse Engineering 101
11 sections. This workshop provides the fundamentals of reversing 
engineering Windows malware using a hands-on experience with 
RE tools and techniques.

Reverse Engineering 102
18 sections. This workshop build on RE101 and focuses on identifying 
simple encryption routines, evasion techniques, and packing.

OffSec Tools I Like Tiny Core Tiny Core, a unique and minimalist distribution of the Linux operating system and tools. distro.ibiblio.org/tinycorelinux/…

htrace is a shell script for http/https troubleshooting and profiling. github.com/trimstray/htra… PCredz This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface. github.com/lgandx/PCredz Spiderfoot SpiderFoot is an open source intelligence (OSINT) automation tool. It integrates with just about every data source available and utilises a range of methods for data analysis, making that data easy to navigate. github.com/smicallef/spid… Pagodo a passive Google dork script to collect potentially vulnerable web pages and applications on the Internet. github.com/opsdisk/pagodo Amass github.com/OWASP/Amass The OWASP Amass Project performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques. TY @trimstray @PythonResponder @binarypool @jeff_foley